Revision: 21929
Author: [email protected]
Date: Mon Jun 23 10:35:58 2014 UTC
Log: Ensure the receiver for EnableAccessCheck is always a JSObject
BUG=
[email protected]
Review URL: https://codereview.chromium.org/349923005
http://code.google.com/p/v8/source/detail?r=21929
Modified:
/branches/bleeding_edge/src/runtime.cc
=======================================
--- /branches/bleeding_edge/src/runtime.cc Mon Jun 23 09:52:05 2014 UTC
+++ /branches/bleeding_edge/src/runtime.cc Mon Jun 23 10:35:58 2014 UTC
@@ -2084,13 +2084,13 @@
RUNTIME_FUNCTION(Runtime_EnableAccessChecks) {
HandleScope scope(isolate);
ASSERT(args.length() == 1);
- CONVERT_ARG_HANDLE_CHECKED(HeapObject, object, 0);
+ CONVERT_ARG_HANDLE_CHECKED(JSObject, object, 0);
Handle<Map> old_map(object->map());
RUNTIME_ASSERT(!old_map->is_access_check_needed());
// Copy map so it won't interfere constructor's initial map.
Handle<Map> new_map = Map::Copy(old_map);
new_map->set_is_access_check_needed(true);
- JSObject::MigrateToMap(Handle<JSObject>::cast(object), new_map);
+ JSObject::MigrateToMap(object, new_map);
return isolate->heap()->undefined_value();
}
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
